Advisories · Technology

SAP_SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML).

Every CVE that names SAP_SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76976 CVE record

CVSS 5.4 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)
- SAP_SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2025-26653 CVE record

CVSS 4.7 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)
- SAP_SE SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2025
CVE-2025-26659 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)
- SAP_SE SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2025
CVE-2025-0059 CVE record

CVSS 6.0 Medium

Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)
- SAP_SE SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2021-33665 CVE record

CVSS 5.4 Medium

SAP SE SAP NetWeaver Application Server ABAP (Applications…: SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)…
- SAP SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)
Not analysed yet 9 Jun 2021